The Library: Multi-Factor Authentication: Multi-factor authentication
Russ Jones · 2020
Cited by 0
Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.
About 2,895 papers for “Multi-factor authentication”
Russ Jones · 2020
Cited by 0
Cornell-Goldwitz Elizabeth · 2016
Multi-factor authentication provides an extra layer of security when logging into Fordham systems.
Cited by 0
Sirapat Boonkrong · Apress eBooks · 2020
Today, there are over 3.5 billion people online and have access to many online services such as banking, shopping, student records, and social media. In order to access these services, they have to carry out and pass a login or authentication mechanism, which usually requires a username and a password. In the previous chapters, we have learned a username and a password are not the only credentials that can be used during the login process.
Cited by 8
Sviatoslav Ponomarov · ScholarSphere (Penn State Libraries) · 2025
Zine produced for Cyber 100 FA2025
Cited by 0Open access
Matthew Zhuang · ScholarSphere (Penn State Libraries) · 2025
Zine created for Cyber 100 Fall 2025
Cited by 0
Khaled Zaky, Dean H Saxe · 2022
Multi-factor authentication (MFA) is critical in securing account access and guarding against account takeover. In this article, we explain the core concepts that define MFA, explore the characteristics of different MFA types, and discuss the various threats mitigated by using MFA.
Cited by 2Open access
Shinnosuke Nozaki, Ayumi Serizawa, Mizuho Yoshihira et al. · Lecture notes in networks and systems · 2022
Cited by 2
Steven Russell · ITNOW · 2023
Abstract Increased adoption of multi–factor authentication (MFA) is helping companies and individuals to secure their data more effectively; however, threat actors have been quick to adapt in the constantly evolving security arms race. Steve Russell MBCS CITP CISSP explores the rising trend in MFA bypass techniques, and how to mitigate against them.
Cited by 1
Lukáš Dostálek, Jiří Šafařík · Radio Electronics Computer Science Control · 2020
Context. Currently, institutions and companies face massive cyber-attacks. Attacks are always focused on some authentication weakness that is part of a particular authentication protocol. In the event of an attack, it is necessary to respond flexibly to the weakening of authentication mechanisms. In the event of an attack, it is necessary to quickly identify the affected authentication factor and its importance to temporarily weaken. Subsequently, it is possible to detect the affected weakness and weaken the meaning of only the algorithms showing this weakness. Algorithms that do not show this weakness should be left unchanged. This paper introduces a mathematics model of authentication. By quick changing the model parameters, we can flexibly adapt the use of authentication means to the situation.Objective. The purpose of this work is to propose a method that will allow to quantify the strength (quality) of authentication. In order it will be possible to dynamically change the authentication method depending on the current risks of attacks.Method. The method is to design a mathematical model and its simulation. The model is then based on the sum of the strengths of the individual authentication factors. A risk-based mechanism is used to determine model parameters. Results. The paper then demonstrates the simulation results using commonly used authentication means. The paper then demonstrates the simulation results using commonly used authentication means: password, hardware based one-time password, device fingerprint, external authentication, and combination of this methods. Simulations have shown that using this mathematical model makes it easy to model the use of authentication resources.Conclusions. With this model, it seems easy to model different security situations. In the real situation, the model parameters will need to be refined as part of the feedback assessment of the established security incidents.
Cited by 3Open access
Hazel Murray, David Malone · Lecture notes in computer science · 2021
Cited by 0Open access
Masahiro Matsui, Hiroaki Ohtsuka, Tetsutaro Kobayashi et al. · NTT technical review · 2016
Apache Milagro (incubating) is an open source project to establish open source software (OSS) for cloud computing.A system designer can choose the M-Pin Authentication Protocol (M-PIN) or the extended M-Pin Authentication Protocol (e-M-PIN) in Milagro Multi-Factor Authentication (Milagro-MFA), which is an authentication system in Apache Milagro (incubating).Additionally, e-M-PIN is a non-interactive protocol and is compatible with password-based Hypertext Transfer Protocol (HTTP) authentication methods such as Basic and Digest Access Authentication since password-based HTTP authentication is also non-interactive.Thus, an authentication system that uses password-based HTTP authentication can be easily migrated to e-M-PIN.We presented e-M-PIN at ApacheCon North America held in May 2016 as a contribution for the OSS community.
Cited by 1Open access
Dipankar Dasgupta, Arunava Roy, Abhijit Kumar Nag · Infosys science foundation series · 2017
Cited by 4
Sergey Bezzateev, S. G. Fomicheva · 2020 Wave Electronics and its Application in Information and Telecommunication Systems (WECONF) · 2020
The Classification of devices involved in authentication and classification of authentication systems by type and combination of protocols used are proposed. The system architecture for soft multi-factor authentication designed and simulated.
Cited by 11
Jayalekshmi Jayakumar, Sr. Mercy Joseph · Zenodo (CERN European Organization for Nuclear Research) · 2022
Abstract: Clients that utilization distributed computing can browse a scope of offices. It offers sensible on-request benefits over the web. One of the carriers furnished by means of cloud is statistics garage. But protection and privacy of cloud facts are important troubles , as cloud does now not ensure the safety components like confidentiality, integrity, identity etc. cloud computing additionally enables customers to get right of entry to records from the cloud servers. To defend data that gets access to it by using unauthorized users, authentication plays a critical position. Authentication is a first step for statistics security, through which users can set up evidence of their identities earlier facts get admission to from machine. In cloud computing environments, conventional authentication strategies do now not offer sturdy protection in opposition to today’s maximum cutting-edge method of assaults. So cloud wishes a dynamic method for person authentication which needs to encompass extra than one credentials for authentication. In this paper, we advise a information safety structure with a robust, dynamic and feasible Multi-issue Authentication (MFA) scheme which integrates extra than one factors like information, ownership, vicinity and time, for cloud consumer authentication.
Cited by 0Open access
Imran Qureshi, Vijay K. Kale · 2024
Most of the gadgets of regular use are at a danger of getting hacked or getting targeted to a fraud. Mobile cell phones have changed the world not only in terms of communication but also in terms of financial transactions. This requires a strong protection to these devices. In this regard a system of multifactor authentication has been proposed. Here with normal methods of password protection and one-time-password (OTP) the proposed system also looks into the IP address of the device and Location of the devise. The paper introduces with literature review and concept before analysis and conclusion.
Cited by 1
Wenting Li, Haibo Cheng, Píng Wang et al. · Greater South Information System · 2021
Multi-factor authentication (MFA) has been widely used to safeguard high-value assets. Unlike single-factor authentication (e.g., password-only login), t-factor authentication ( tFA) requires a user always to carry and present t specified factors so as to strengthen the security of login. Nevertheless, this may restrict user experience in limiting the flexibility of factor usage, e.g., the user may prefer to choose any factors at hand for login authentication. To bring back usability and flexibility without loss of security, we introduce a new notion of authentication, called (t,n) threshold MFA, that allows a user to actively choose t factors out of n based on preference. We further define the "most-rigorous" multi-factor security model for the new notion, allowing attackers to control public channels, launch active/passive attacks, and compromise/corrupt any subset of parties as well as factors. We state that the model can capture the most practical security needs in the literature. We design a threshold MFA key exchange (T-MFAKE) protocol built on the top of a threshold oblivious pseudorandom function and an authenticated key exchange protocol. Our protocol achieves the "highest-attainable" security against all attacking attempts in the context of parties/factors being compromised/corrupted. As for efficiency, our design only requires 4+t exponentiations, 2 multi-exponentiations and 2 communication rounds. Compared with existing tFA schemes, even the degenerated (t,t) version of our protocol achieves the strongest security (stronger than most schemes) and higher efficiency on computational and communication. We instantiate our design on real-world platform to highlight its practicability and efficiency.
Cited by 0Open access
Joseph G. Maes, Khandaker Abir Rahman, Avishek Mukherjee · 2023
We propose Hybrid Smartwatch Multi-Factor Authenticator (HS-MFA), a system for leveraging a smartwatch as an additional form of user authentication. HS-MFA examines both inherent and subtle intentional gestures as a means of appropriately identifying a user. The system leverages a custom-developed Android Wear OS smartwatch app that records accelerometer sensor data for both user keystrokes and touchscreen interactions using a smartwatch paired with a smartphone. Observed authentication methods include username and password entry on a keyboard, pattern unlocking for smartphones, and PIN entry with a smartphone. Five different pattern matching methods were examined for a total of 96,880 genuine and impostor comparison tests by processing data from 246 unique user samples. The two best performing analysis methods achieved Equal Error Rate (EER) values between 0 and 67%, with an average of 28%, across the observed three axes of accelerometer sensor data captured through smartwatch. With notable accuracy and ease of use, this method would be a novel and intuitive multifactor authentication system for regular users as well as severely vision-impaired users to provide security for their digital assets in cyberspace.
Cited by 2
Wenting Li, Haibo Cheng, Píng Wang et al. · Greater South Information System · 2021
Multi-factor authentication (MFA) has been widely used to safeguard high-value assets. Unlike single-factor authentication (e.g., password-only login), t-factor authentication ( tFA) requires a user always to carry and present t specified factors so as to strengthen the security of login. Nevertheless, this may restrict user experience in limiting the flexibility of factor usage, e.g., the user may prefer to choose any factors at hand for login authentication. To bring back usability and flexibility without loss of security, we introduce a new notion of authentication, called (t,n) threshold MFA, that allows a user to actively choose t factors out of n based on preference. We further define the "most-rigorous" multi-factor security model for the new notion, allowing attackers to control public channels, launch active/passive attacks, and compromise/corrupt any subset of parties as well as factors. We state that the model can capture the most practical security needs in the literature. We design a threshold MFA key exchange (T-MFAKE) protocol built on the top of a threshold oblivious pseudorandom function and an authenticated key exchange protocol. Our protocol achieves the "highest-attainable" security against all attacking attempts in the context of parties/factors being compromised/corrupted. As for efficiency, our design only requires 4+t exponentiations, 2 multi-exponentiations and 2 communication rounds. Compared with existing tFA schemes, even the degenerated (t,t) version of our protocol achieves the strongest security (stronger than most schemes) and higher efficiency on computational and communication. We instantiate our design on real-world platform to highlight its practicability and efficiency.
Cited by 0Open access
RIT Faculty Senate, Phillips, Omar · RIT Scholar Works (Rochester Institute of Technology) · 2018
Cited by 0
Salman Khan, Mohd Akbar · 2015
Due to the recent security infringement incidents of single factor authentication services, there is an inclination towards the use of multi-factor authentication (MFA) mechanisms. These MFA mechanisms should be available to use on modern hand-held computing devices like smart phones due to their big share in computational devices market. Moreover, the high social acceptability and ubiquitous nature has attracted the enterprises to offer their services on modern day hand-held devices. In this regard, the big challenge for these enterprises is to ensure security and privacy of users. To address this issue, we have implemented a verification system that combines human inherence factor (handwritten signature biometrics) with the standard knowledge factor (user specific passwords) to achieve a high level of security. The major computational load of the aforementioned task is shifted on a cloud based application server so that a platform-independent user verification service with ubiquitous access becomes possible. Custom applications are built for both the iOS and Android based devices which are linked with the cloud based two factor authentication (TFA) server. The system is tested on-the-run by a diverse group of users and 98.4% signature verification accuracy is achieved.
Cited by 17